AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 223

Question

A company has deployed a Java Spring Boot application as a pod that runs on Amazon Elastic Kubernetes Service (Amazon EKS) in private subnets. The application needs to write data to an Amazon DynamoDB table. A solutions architect must ensure that the application can interact with the DynamoDB table without exposing traffic to the internet. Which combination of steps should the solutions architect take to accomplish this goal? (Choose two.)

Accepted Answer

Correct answer: A, D. The correct answer is A, D. Option A: Attach an IAM role that has sufficient privileges to the EKS pod. Option D: Create a VPC endpoint for DynamoDB. Amazon EKS runs managed Kubernetes when you need the Kubernetes ecosystem. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. A VPC endpoint provides private connectivity to AWS services without traversing the public internet.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 223